Go Back   vb.org Archive > Community Central > Community Lounge
  #51  
Old 11-26-2013, 04:34 PM
BSMedia BSMedia is offline
 
Join Date: Feb 2009
Posts: 454
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by kh99 View Post
I don't understand why it's odd. If the customer information had been stolen then it wouldn't be odd at all. But it wasn't, and in any case I never got any emails. It seems likely from what was said in this thread that the latest emails were sent using vbseo customer information.
Opps forgot, customer != forum member. Let me rephrase


Odd, since vBulletin's database was hacked and hundreds of thousands registered members email address were stolen and subsequently placed in to the hands of nefarious organization(s) spam emails can be expected.
Reply With Quote
  #52  
Old 11-26-2013, 04:46 PM
BirdOPrey5's Avatar
BirdOPrey5 BirdOPrey5 is offline
Senior Member
 
Join Date: Jun 2008
Location: New York
Posts: 10,610
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

This thread and this case has nothing to do with the recent hack at vBulletin.
Reply With Quote
  #53  
Old 11-26-2013, 04:59 PM
TheLastSuperman's Avatar
TheLastSuperman TheLastSuperman is offline
Senior Member
 
Join Date: Sep 2008
Location: North Carolina
Posts: 5,844
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by BirdOPrey5 View Post
According to this site- http://www.yougetsignal.com/tools/we...on-web-server/

These 4 domains are hosted on the same server-
menaprof.com
vbfoster.com
vbrewrite.com
marcomamdouh.com

vbfoster is a mod on vBulletin.org here-
https://vborg.vbsupport.ru/showthread.php?t=281347

If you go to their website and click the purchase link you get an error that the SSL certificate is registered to vbrewrite, not vbfoster.

So it looks like it is the same people as behind vbfoster.
Quote:
Originally Posted by Paul M View Post
All those sites are associated with MARCO1, who used to be part of VBSEO (and not to be confused with Marco who worked for vb.org a few years ago).

Interestingly, the e-mail address my e-mail went too was the one I registered on VBSEO with.
Quote:
Originally Posted by puertoblack2003 View Post
it's from vbseo, everyone that is speaking out of context is jumping the gun assuming things.And not getting the facts straight.vbseo closed down and now someone has the database so you see where this is going...
Thanks for that .

Quote:
Originally Posted by BSMedia View Post
Opps forgot, customer != forum member. Let me rephrase


Odd, since vBulletin's database was hacked and hundreds of thousands registered members email address were stolen and subsequently placed in to the hands of nefarious organization(s) spam emails can be expected.
Please see the above .
Reply With Quote
Благодарность от:
puertoblack2003
  #54  
Old 11-26-2013, 06:05 PM
JacquiiDesigns's Avatar
JacquiiDesigns JacquiiDesigns is offline
 
Join Date: Dec 2008
Location: Tennessee
Posts: 687
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by TheLastSuperman View Post
Now listen, the above "back and forth" between you two is enough, you're starting to make it personal when it should never be :erm: - agreed?
Totally agree, which is why I reported a post before it could get further out of hand.
Thanks for your intercession.

Quote:
Originally Posted by puertoblack2003 View Post
it's from vbseo, everyone that is speaking out of context is jumping the gun assuming things.And not getting the facts straight.vbseo closed down and now someone has the database so you see where this is going...
Quote:
Originally Posted by BirdOPrey5 View Post
This thread and this case has nothing to do with the recent hack at vBulletin.
I agree with both of these statements.... I think.

I say "I think" because my registered email here, on vB.com and at vBSEO are the same. I didn't go through each and every one of the emails, so I can't swear with 100% certainty. But I have 3 registered email addresses in the vBulletin system.

The emails I received and took note of were sent to the email addresses shared by vBSEO and vBulletin. I did not notice this spam sent to any of the additional email accounts registered in the vBulletin system.

Because of this - I think I can conclude that vBulletin had nothing to do with the vBRewrite spam spree.

It's just odd though. If a company wanted to make a touchdown type of impression on possible paying customers - 100s of spam emails is NOT the way to do it. I think they've shot themselves in the foot before the ball was even hiked. :down:

Not to mention the fact that they're targeting vB 5 Connect license holders...all 4 of them A more successful business model would have most definitely included vB 4.x and vB 3.x customers as well.

J.
Reply With Quote
  #55  
Old 11-27-2013, 12:09 AM
puertoblack2003's Avatar
puertoblack2003 puertoblack2003 is offline
 
Join Date: Aug 2005
Location: Philadelphia
Posts: 1,073
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by JacquiiDesigns View Post
Totally agree, which is why I reported a post before it could get further out of hand.
Thanks for your intercession.




I agree with both of these statements.... I think.

I say "I think" because my registered email here, on vB.com and at vBSEO are the same. I didn't go through each and every one of the emails, so I can't swear with 100% certainty. But I have 3 registered email addresses in the vBulletin system.

The emails I received and took note of were sent to the email addresses shared by vBSEO and vBulletin. I did not notice this spam sent to any of the additional email accounts registered in the vBulletin system.

Because of this - I think I can conclude that vBulletin had nothing to do with the vBRewrite spam spree.

It's just odd though. If a company wanted to make a touchdown type of impression on possible paying customers - 100s of spam emails is NOT the way to do it. I think they've shot themselves in the foot before the ball was even hiked. :down:

Not to mention the fact that they're targeting vB 5 Connect license holders...all 4 of them A more successful business model would have most definitely included vB 4.x and vB 3.x customers as well.

J.

this is a legitimate email from vbulletin

Code:
spf=pass (google.com: domain of bounce-129735_HTML-157626918-7352852-1022692-0@bounce.shopping.ibemail.com designates 66.231.95.40 as permitted sender) smtp.mail=bounce-129735_HTML-157626918-7352852-1022692-0@bounce.shopping.ibemail.com;
       dkim=pass header.i=@shopping.ibemail.com
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=201101117; d=shopping.ibemail.com;
Reply With Quote
  #56  
Old 11-27-2013, 12:44 AM
JacquiiDesigns's Avatar
JacquiiDesigns JacquiiDesigns is offline
 
Join Date: Dec 2008
Location: Tennessee
Posts: 687
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by puertoblack2003 View Post
this is a legitimate email from vbulletin

Code:
spf=pass (google.com: domain of bounce-129735_HTML-157626918-7352852-1022692-0@bounce.shopping.ibemail.com designates 66.231.95.40 as permitted sender) smtp.mail=bounce-129735_HTML-157626918-7352852-1022692-0@bounce.shopping.ibemail.com;
       dkim=pass header.i=@shopping.ibemail.com
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=201101117; d=shopping.ibemail.com;
Don't call me stupid - but I'm not sure I understand what you're saying
The code you posted above is how legitimate email from vBulletin will look?
Reply With Quote
  #57  
Old 11-27-2013, 12:56 AM
puertoblack2003's Avatar
puertoblack2003 puertoblack2003 is offline
 
Join Date: Aug 2005
Location: Philadelphia
Posts: 1,073
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by JacquiiDesigns View Post
Don't call me stupid - but I'm not sure I understand what you're saying
The code you posted above is how legitimate email from vBulletin will look?
lol i will never call anyone stupid but that is information i pull from my email client to determine rather it's legit email or spam email, so that way i can take appropriate steps to filter my emails.By the way i pulled that from my gmail account.


addition: the general info is a good email from vbulletin.
Reply With Quote
Благодарность от:
JacquiiDesigns
  #58  
Old 11-27-2013, 01:55 AM
Paul M's Avatar
Paul M Paul M is offline
 
Join Date: Sep 2004
Location: Nottingham, UK
Posts: 23,748
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by BSMedia View Post
Odd, vBulletin gets hacked, now customers are getting a bunch of spam emails...
Either you didnt even bother to read the thread or you are just trolling, I can guess which myself.
The sender was an ex vbseo staff member who pretty clearly appears to have sent it to the vbseo userlist.
Reply With Quote
  #59  
Old 11-27-2013, 02:26 AM
CharlieDelta CharlieDelta is offline
 
Join Date: Apr 2010
Posts: 616
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by BSMedia View Post
Odd, vBulletin gets hacked, now customers are getting a bunch of spam emails...
Ridiculous. I never received any emails and guess what, I never registered on vBSeo. This has got nothing to do with vBulletin getting hacked.
Reply With Quote
  #60  
Old 11-27-2013, 06:12 AM
lazytown lazytown is offline
 
Join Date: Feb 2004
Posts: 503
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I think links within this thread going to vbrewrite should be removed.. it's just giving them link juice for google, which is probably what they want.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 08:51 PM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.07531 seconds
  • Memory Usage 2,303KB
  • Queries Executed 14 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (2)bbcode_code
  • (13)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (10)post_thanks_box
  • (2)post_thanks_box_bit
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (2)post_thanks_postbit
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • fetch_musername
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • post_thanks_function_fetch_thanks_bit_start
  • post_thanks_function_show_thanks_date_start
  • post_thanks_function_show_thanks_date_end
  • post_thanks_function_fetch_thanks_bit_end
  • post_thanks_function_fetch_post_thanks_template_start
  • post_thanks_function_fetch_post_thanks_template_end
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete